Abstract:Cloud service providers offer their customers with on-demand and cost-effective services, scalable computing, and network infrastructures. Enterprises migrate their services to the cloud to utilize the benefit of cloud computing such as eliminating the capital expense of their computing need. There are security vulnerabilities and threats in the cloud. Many researches have been proposed to analyze the cloud security using Graphical Security Models (GSMs) and security metrics. In addition, it has been widely researched in finding appropriate defensive strategies for the security of the cloud. Moving Target Defense (MTD) techniques can utilize the cloud elasticity features to change the attack surface and confuse attackers. Most of the previous work incorporating MTDs into the GSMs are theoretical and the performance was evaluated based on the simulation. In this paper, we realized the previous framework and designed, implemented and tested a cloud security assessment tool in a real cloud platform named UniteCloud. Our security solution can (1) monitor cloud computing in real-time, (2) automate the security modeling and analysis and visualize the GSMs using a Graphical User Interface via a web application, and (3) deploy three MTD techniques including Diversity, Redundancy, and Shuffle on the real cloud infrastructure. We analyzed the automation process using the APIs and showed the practicality and feasibility of automation of deploying all the three MTD techniques on the UniteCloud.

Threat Assessment Method of Target Electromagnetic Environment Based on Cloud Reasoning

Process Stability Modeling and Attack Protection of Industrial Control System Based on Reverse Cloud Algorithm Model

Numerical Calculation of Apparent Ir Radiation of Cloud

Effects of cloud on air target IR detection

Threat and Its Countermeasures of TEMPEST ATTACK on Computer Information Security

Threat Assessment for Aerial Targets Based on Three-way Multi-criteria Decision Making

Analysis of Internal Threat Detection Methods of Power Grid under the Characteristic Cloud Computing Model

Evaluating the Security and Economic Effects of Moving Target Defense Techniques on the Cloud

Comprehensive Reliability Evaluation of Multistate Complex Electromechanical Systems Based on Similarity of Cloud Models

The Establishment of Computer Generated Electromagnetic Interference Environmental Model

Quantitative Hierarchical Threat Evaluation Model for Network Security

An Electromagnetic Environment Situation Assessment and Abnormal Detection Technology

Equipment Contention Attack in Cloud Manufacturing Environments and Its Defense

An Automated Security Analysis Framework and Implementation for Cloud

Design and Implementation of the Advanced Cloud Privacy Threat Modeling

Network Security Evaluation Model Based on Cloud Computing.

Classification of battlefield electromagnetic environment for missiles

A Method of Threat Assessment Using Multiple Attribute Decision Making

Advanced Cloud Privacy Threat Modeling

A Disturbance Evaluation Model of Power Quality Based on Backward Cloud Theory

Multiple behavior information fusion based quantitative threat evaluation